Hong Kong: Sunrate Launches Mastercard-Certified Card That Lets AI Agents Pay Business Bills
Hong Kong-based business payments firm Sunrate has launched a virtual company card that AI software agents can use to pay suppliers and other bills on a firm’s behalf, within limits set by people. Unveiled at Hong Kong FinTech Week on 2 November, the card has passed Mastercard’s certification for agent-initiated payments, and is the company’s first payment product built for so-called “agentic” spending.
Key facts
- The Sunrate Agentic Card is a programmable, multi-currency virtual commercial card that authorised AI agents can create, use and close on their own.
- It has completed Mastercard Agent Pay certification, Mastercard’s framework for verifying the identity and authority of an AI agent when it starts a transaction on the card network.
- Businesses set the rules: spending limits, merchant categories, currencies, countries and how long each card stays valid. Cards can expire once a task is done.
- Every action is logged for audit, and higher-risk payments can be flagged or sent to a human for approval.
- Sunrate, founded in 2016, says it serves businesses in more than 190 countries and regions and has offices in Hong Kong, Singapore, Kuala Lumpur, Jakarta, Shanghai and London.
How the card works
Most virtual company cards today are issued by a finance team member and handed to an employee or a single online service. Sunrate’s version flips that model. A business gives an AI agent permission to issue its own single-use or task-specific cards, start the payment, and pull back the result, all inside a rulebook the company writes in advance.
Sunrate’s own example is an online travel agency. The firm could issue one card for a single marketing campaign or one supplier invoice, cap the amount and restrict where it can be used. An AI agent then watches spending against those rules, approves payments that comply, blocks exceptions and escalates anything risky to a person. Sunrate lists procurement, business travel, marketing spend and supplier payments as the main uses.
The card sits within Sunrate.AI, a set of five software agents the company offers: a payment agent for execution and reconciliation, an FX agent for currency conversion, a compliance agent for pre-screening, an onboarding agent and a chat agent that lets staff give instructions in plain language. Sunrate’s Head of AI, Li Yilong, said the next stage of agentic payments is about letting AI carry out financial tasks within clear limits, not just make suggestions.
Why it matters
“Agentic commerce”, where software agents shop and pay with little human input, is one of the hottest topics in payments this year. The hard part is trust: a merchant, a card network and the paying company all need to know that an agent is genuine and is allowed to spend. Mastercard’s Agent Pay certification is meant to answer that question on its network, and the Sunrate card is the company’s first product to apply it directly to business transactions.
For finance teams, the pitch is tighter control rather than looser spending. Narrow, short-lived cards limit the damage if a card number leaks, and full audit trails make reconciliation easier. Sunrate and Mastercard set out similar requirements, including governance, authorisation and auditability, in a joint white paper released in July.
There is also a regional angle. Sunrate runs an office in Kuala Lumpur alongside its hubs in Singapore and Jakarta, so Southeast Asian exporters, travel firms and online sellers that already use its cross-border accounts are a natural audience. Sunrate has not yet said which markets will get the card first.
What to watch
- Rollout and pricing: Sunrate has not named launch customers, prices or a market-by-market schedule.
- Rival cards: whether other corporate card issuers and banks in Asia follow with Agent Pay or similar credentials from other card networks.
- Regulators: how central banks such as the HKMA, the Monetary Authority of Singapore and Bank Negara Malaysia treat liability and consumer-protection rules when an AI agent, not a person, presses “pay”.
Related on FinDeskAsia: How payment gateways work in Malaysia and ASEAN’s cross-border QR record.
Sources: Sunrate via PR Newswire (November 2026); TechNode Global (November 2026).
